Huawei S9700 Series Configuration Manual page 83

S9700 Core Routing Switch
Configuration Guide - SPU
Figure 2-3 Networking of ASPF and port mapping
FTP server
129.38.1.2
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
6.
7.
Procedure
Step 1 Import flows from the S9700 to the SPU.
1.
2.
Issue 01 (2012-03-15)
Web server
129.38.1.4
Internal
network
Telnet server
129.38.1.3
Import flows from the S9700 to the SPU.
Configure zones and the interzone.
Add interfaces to the zones.
Configure an ACL.
Configure ACL-based packet filtering in the interzone.
Configure ASPF in the interzone.
Map port 2121 to the HTTP protocol.
Configure the S9700.
[Quidway] vlan 10
[Quidway-vlan10] quit
[Quidway] interface gigabitethernet 1/0/10
[Quidway-GigabitEthernet1/0/10] port link-type access
[Quidway-GigabitEthernet1/0/10] port default vlan 10
[Quidway-GigabitEthernet1/0/10] quit
[Quidway] vlan 20
[Quidway-vlan20] quit
[Quidway] interface gigabitethernet 1/0/11
[Quidway-GigabitEthernet1/0/11] port link-type access
[Quidway-GigabitEthernet1/0/11] port default vlan 20
[Quidway-GigabitEthernet1/0/11] quit
[Quidway] interface Eth-Trunk 0
[Quidway-Eth-Trunk0] port link-type trunk
[Quidway-Eth-Trunk0] port trunk allow-pass vlan 10 20
[Quidway-Eth-Trunk0] trunkport XGigabitEthernet 5/0/0
[Quidway-Eth-Trunk0] trunkport XGigabitEthernet 5/0/1
[Quidway-Eth-Trunk0] quit
Configure the SPU.
[Quidway] sysname SPU
[SPU] interface Eth-trunk0
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
VLAN 10
Eth-Trunk0.1
XGE5/0/0
XGE5/0/1
Eth-Trunk0.2
VLAN 20
GE1/0/10 GE1/0/11
Switch
2 Firewall Configuration
202.39.2.3
72